On 19/10/10 22:34, Dennis German wrote:
I am surprised this plain text spam did not trip for US$350,000
sa 3.2.4
http://www.Real-World-Systems.com/mail/spam.un
It hits a stack of rules here (some are my own scoring) - looks like
it's time to upgrade to SA 3.3.1.
X-Spam-Report:
* 6.0 BAYES_99 BODY: Bayes spam probability is 99 to 100%
* [score: 0.9999]
* 25 RCVD_IN_BRBL_LASTEXT RBL: RCVD_IN_BRBL_LASTEXT
* [148.208.170.3 listed in bb.barracudacentral.org]
* 3.0 RCVD_IN_JMF_BL RBL: Relay listed in JunkEmailFilter
BLACK (bad)
* [148.208.170.3 listed in hostkarma.junkemailfilter.com]
* 1.8 DKIM_ADSP_DISCARD No valid author signature, domain
signs all mail
* and suggests discarding the rest
* 1.0 MISSING_HEADERS Missing To: header
* 0.0 T_LOTS_OF_MONEY Huge... sums of money
* 1.6 REPLYTO_WITHOUT_TO_CC REPLYTO_WITHOUT_TO_CC
* 3.0 JM_SOUGHT_FRAUD_3 Body contains frequently-spammed text
patterns
* 3.4 FILL_THIS_FORM_LONG Fill in a form with personal information
* 0.0 T_FILL_THIS_FORM Fill in a form with personal information
* 1.5 ADVANCE_FEE_4_NEW Appears to be advance fee fraud
(Nigerian 419)
* 3.3 ADVANCE_FEE_5_NEW Appears to be advance fee fraud
(Nigerian 419)
* 0.5 ADVANCE_FEE_3_NEW Appears to be advance fee fraud
(Nigerian 419)
* 0.5 ADVANCE_FEE_2_NEW_MONEY Advance Fee fraud and lots of money
* 0.9 ADVANCE_FEE_3_NEW_FORM Advance Fee fraud and a form
* 1.0 ADVANCE_FEE_3_NEW_MONEY Advance Fee fraud and lots of money
* 0.8 ADVANCE_FEE_2_NEW_FORM Advance Fee fraud and a form
* 0.5 MONEY_FRAUD_5 Lots of money and many fraud phrases
* 0.8 MONEY_FRAUD_8 Lots of money and very many fraud phrases
* 0.5 MONEY_FRAUD_3 Lots of money and several fraud phrases
* 0.5 FORM_FRAUD_5 Fill a form and many fraud phrases
* 0.5 FORM_FRAUD_3 Fill a form and several fraud phrases
